{"slug": "ciscos-privileged-infrastructure-access-ties-admin-and-ai-agent-privileges-to", "title": "Cisco’s Privileged Infrastructure Access ties admin and AI agent privileges to the task", "summary": "Cisco Systems Inc. introduced Privileged Infrastructure Access, which grants administrators and AI agents task-scoped privileges on network infrastructure that expire when the work ends, Cisco vice president of identity products Matt Caulfield announced in a blog post. Caulfield said each session runs under a cryptographic identity and leaves a record of who accessed what, the policy applied and any changes made, with AI agents and automation scripts bound by the same rules as people. The launch builds on Cisco's August partnership with infrastructure identity company Teleport, which included an undisclosed stake making Cisco the startup's largest strategic investor, and Caulfield cited the July Hugging Face Inc. incident, in which OpenAI Group PBC disclosed two of its models escaped a test environment and used credentials they should not have had, as evidence AI has reshaped the threat picture.", "body_md": "### Cisco’s Privileged Infrastructure Access ties admin and AI agent privileges to the task\n\nCisco Systems Inc. today introduced Privileged Infrastructure Access to let administrators and artificial intelligence agents work on network infrastructure with privileges that last only as long as the task at hand.\n\nThe release goes after the excess access network engineers often carry on routers and switches, which Matt Caulfield, vice president of identity products at Cisco, described in a [blog post](https://blogs.cisco.com/security/cisco-rethinks-privileged-infrastructure-access) announcing it. In his example, a configuration update pushed to hundreds of switches during a maintenance window fails on some of them, and an administrator has to fix the problem before the window closes. The privilege needed for that kind of job is, as he put it, “often broader and more persistent than the task demands.”\n\nWhen a network engineer logs into a router or switch, Caulfield wrote, the single sign-on and multifactor authentication guarding a company’s applications often stay behind. Teams that find the approved access route too slow for urgent work carve out exceptions that he said end up as the norm, with usable credentials still sitting in place after the job. If the secure path is not also the fastest, operators “will find another way in.”\n\nBack in that maintenance window, the administrator would request access for the specific fix through Privileged Infrastructure Access. The session that opens runs under a cryptographic identity, with privilege cut to what the repair requires. No privilege exists at all, Caulfield wrote, “if there is no work being done.”\n\nFor security teams, each session leaves behind “a clear record of who accessed what,” in Caulfield’s words, along with the policy that applied and any changes made. He wrote that AI agents and automation scripts work under the same task-scoped rules as people, so an agent does not “inherit broad, unmanaged access simply because” it is in a hurry.\n\nCaulfield set the launch against a threat picture that he said AI has reshaped. Sophisticated attack capabilities that were once the preserve of well-funded nation-state groups are now available to many more adversaries, according to the post.\n\nHis example was the Hugging Face Inc. incident [in July](https://siliconangle.com/2026/07/21/openai-says-ai-models-broke-testing-hacked-hugging-face/). In that case, OpenAI Group PBC disclosed that two of its models had escaped a test environment and used credentials they should not have had to reach production systems at Hugging Face.\n\nToday’s launch builds on a partnership Cisco struck [in August](https://blogs.cisco.com/security/identity-everywhere-bringing-infrastructure-identity-to-agentic-it) with infrastructure identity company Teleport. Alongside technology integration and licensing, the deal included an undisclosed stake that made Cisco the startup’s largest strategic investor.\n\nPeter Bailey, who heads Cisco’s security business, and Teleport co-founder and Chief Executive Ev Kontsevoy wrote at the time that privileged access for network and infrastructure administrators would be the first use case. As they said, Teleport “brokers and records the session, then ends the privilege with the access window.”\n\n##### Photo: [Wikimedia Commons](https://commons.wikimedia.org/wiki/File:Ciscosign.jpg)\n\n# A message from John Furrier, co-founder of SiliconANGLE:\n\nSupport our mission to keep content open and free by engaging with theCUBE community. **Join theCUBE’s Alumni Trust Network**, where technology leaders connect, share intelligence and create opportunities.\n\n- **15M+ viewers of theCUBE videos** , powering conversations across AI, cloud, cybersecurity and more\n- **11.4k+ theCUBE alumni** — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network\n\n### Are you an AWS customer?  Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: [https://siliconangle.com/aws-marketplace/](https://siliconangle.com/aws-marketplace/)\n\n##### **About SiliconANGLE Media**\n\n[SiliconANGLE](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552),\n\n[theCUBE Network](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da),\n\n[theCUBE Research](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f),\n\n[CUBE365](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6),\n\n[theCUBE AI](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683)and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.\n\nFounded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.", "url": "https://wpnews.pro/news/ciscos-privileged-infrastructure-access-ties-admin-and-ai-agent-privileges-to", "canonical_source": "https://siliconangle.com/2026/10/26/ciscos-privileged-infrastructure-access-ties-admin-and-ai-agent-privileges-to-the-task/", "published_at": "2026-10-26 20:00:13+00:00", "updated_at": "2026-10-26 20:12:25.313553+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "artificial-intelligence"], "entities": ["Cisco Systems Inc.", "Privileged Infrastructure Access", "Matt Caulfield", "Teleport", "Hugging Face Inc.", "OpenAI Group PBC", "Peter Bailey", "Ev Kontsevoy"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/ciscos-privileged-infrastructure-access-ties-admin-and-ai-agent-privileges-to", "markdown": "https://wpnews.pro/news/ciscos-privileged-infrastructure-access-ties-admin-and-ai-agent-privileges-to.md", "text": "https://wpnews.pro/news/ciscos-privileged-infrastructure-access-ties-admin-and-ai-agent-privileges-to.txt", "jsonld": "https://wpnews.pro/news/ciscos-privileged-infrastructure-access-ties-admin-and-ai-agent-privileges-to.jsonld"}}